Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
File: yErFLitXLMKpmnQSV-VpqjceNWg.mft (raw, json)
Hash identifier: zdnqv0y4k0nkobeTlAPK/RGE1hO10AObOmSjpuFISm4=
Subject key identifier: 11:C4:03:80:AA:3E:08:B2:82:DD:53:2E:4A:0C:EC:EC:06:0C:11:F7
Authority key identifier: C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
Certificate issuer: /CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Certificate serial: 019D2583836B2210C02E03C6288D8E165295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
Manifest number: 110F
Signing time: Wed 25 Mar 2026 15:01:08 +0000
Manifest this update: Wed 25 Mar 2026 15:01:08 +0000
Manifest next update: Thu 26 Mar 2026 15:01:08 +0000
Files and hashes: 1: JqbX_PTUjq28Lqi1j_knCVS0A90.roa (hash: iCvt3eLQurCsmS7VrC6JLl3/RIGkqIASrCrA/w60LJs=)
2: yErFLitXLMKpmnQSV-VpqjceNWg.crl (hash: zlBuoU1AdS2qJvtNjqIXcZd3rWLoZ1uiUyEsD+okZn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:83:6b:22:10:c0:2e:03:c6:28:8d:8e:16:52:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84ac52e2b572cc2a99a741257e569aa371e3568
Validity
Not Before: Mar 25 15:01:08 2026 GMT
Not After : Mar 26 15:01:08 2026 GMT
Subject: CN=11c40380aa3e08b282dd532e4a0cecec060c11f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:aa:44:16:45:4a:ef:f3:34:c9:14:68:31:24:
3e:d9:49:91:e6:7b:ec:c3:df:d5:da:4f:33:34:3c:
c0:64:3c:e8:56:a3:0d:01:50:98:d3:b8:09:72:d6:
6c:cd:ad:81:02:8e:a5:13:66:7e:d8:92:c4:19:dd:
18:74:38:67:20:3b:e0:51:c6:db:68:5f:c7:5d:5c:
04:60:69:0e:f0:dd:23:f8:92:57:3e:ce:04:95:b8:
7d:c9:2c:2a:64:31:ac:37:30:1e:a1:46:a9:ca:f7:
5b:1d:bf:ec:b0:6f:d5:ad:6c:f6:ac:37:6b:64:b5:
31:8b:e7:d7:6f:53:8f:6d:cd:83:47:57:f3:5e:13:
30:a3:cd:42:c3:b2:b2:e7:a0:44:d1:9a:71:58:3d:
e1:df:06:56:72:78:85:44:cc:aa:6a:c1:2b:67:88:
25:c4:04:a2:18:34:01:0b:ee:ed:96:fd:b4:30:fb:
b9:2e:4e:14:1d:83:1d:dc:ce:1a:a0:81:27:1e:84:
0f:68:14:93:46:e9:46:02:0f:3c:ea:39:16:ca:4c:
46:e8:56:b3:d0:ff:bd:92:36:ef:39:82:9d:9b:92:
ff:d9:a1:a7:72:4f:f8:6b:3d:0e:da:25:29:1b:e8:
4a:e9:be:81:a5:dd:f4:96:0a:52:a9:31:ed:00:2e:
7a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C4:03:80:AA:3E:08:B2:82:DD:53:2E:4A:0C:EC:EC:06:0C:11:F7
X509v3 Authority Key Identifier:
keyid:C8:4A:C5:2E:2B:57:2C:C2:A9:9A:74:12:57:E5:69:AA:37:1E:35:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yErFLitXLMKpmnQSV-VpqjceNWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/abdafc-b389-4518-b12d-2cc342b00519/1/yErFLitXLMKpmnQSV-VpqjceNWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:5b:03:d4:13:9f:1f:15:e1:f3:da:39:05:48:d4:7e:13:8b:
e8:fa:bc:8a:2a:ff:db:c9:67:54:37:4e:6a:26:24:bb:7a:2a:
17:5a:83:0e:b8:72:a7:ea:ba:04:2b:3f:16:6e:8a:aa:38:37:
56:f0:b5:62:1d:e5:56:f4:df:07:5d:07:bf:11:32:94:01:76:
86:4e:d0:a1:52:0f:78:5a:34:fe:30:f6:79:73:d7:ef:1d:96:
78:0d:49:96:66:db:d9:82:67:42:01:d9:3d:36:2d:08:7c:87:
0e:b9:3e:3f:e5:ed:02:c9:b7:aa:af:7b:7e:bb:f8:df:60:8b:
98:54:81:fc:69:f3:83:be:e4:db:58:99:75:7c:37:4c:9d:c0:
66:06:27:0a:49:1e:ee:94:87:cd:a6:bd:20:a3:bc:58:da:e7:
d3:64:b1:f2:12:06:4e:95:3f:1b:8b:9c:82:ad:40:c7:6b:36:
15:47:1d:95:a9:65:42:09:b3:b9:19:60:63:e5:29:22:69:8f:
0c:93:aa:b0:cd:10:e3:c6:1f:97:f6:ec:e1:e1:91:ba:38:2e:
03:10:0a:e1:4e:a7:b0:07:da:55:01:ee:65:e5:98:8d:1c:b8:
96:92:03:26:7d:2c:b2:7f:cc:32:06:79:e3:c0:7f:80:c0:64:
89:2e:2c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:56 2026 by rpki-client